diff --git a/roles/porkbun/defaults/main.yml b/roles/porkbun/defaults/main.yml
new file mode 100644
index 0000000..1d47c5a
--- /dev/null
+++ b/roles/porkbun/defaults/main.yml
@@ -0,0 +1,6 @@
+---
+# ‹apikey› provided by Porkbun
+porkbun_key: None
+
+# ‹secretapikey› provided by Porkbun
+porkbun_secret: None
diff --git a/roles/porkbun/tasks/main.yml b/roles/porkbun/tasks/main.yml
new file mode 100644
index 0000000..18a447d
--- /dev/null
+++ b/roles/porkbun/tasks/main.yml
@@ -0,0 +1,6 @@
+---
+- name: Create the file with Porkbun secrets
+  ansible.builtin.template:
+    src: templates/porkbun.ini
+    dest: /etc/porkbun.ini
+    mode: 0600
diff --git a/roles/porkbun/templates/porkbun.ini b/roles/porkbun/templates/porkbun.ini
new file mode 100644
index 0000000..ff5dada
--- /dev/null
+++ b/roles/porkbun/templates/porkbun.ini
@@ -0,0 +1,2 @@
+dns_porkbun_key={{ porkbun_key }}
+dns_porkbun_secret={{ porkbun_secret }}